CyberStrikeAI v1.7.15

CyberStrikeAI 中文 | English The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next. CyberStrikeAI connects planning, execution, human oversight, evidence, and replay in one auditable...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987-Poc Proof o...

Malicious code in @akrai/report (npm)

The @akrai/report package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so...

MAL-2026-10964 Malicious code in markscan-utils (npm)

The markscan-utils package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms s...

MAL-2026-10951 Malicious code in @markscan/api (npm)

The @markscan/api package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so...

MAL-2026-10948 Malicious code in @akrai/report_new (npm)

The @akrai/reportnew package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms...

Malicious code in @markscan/utils (npm)

The @markscan/utils package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms ...

wp-cve-exploits

wp-cve-exploits Nuclei detection templates and validated PoC...

Exploit for Improper Restriction of Names for Files and Other Resources in Microsoft

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for Command Injection in Exiftool_Project Exiftool

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This...

Xseta-WP-Exploit

Xseta-WP-Exploit Xseta - WordPr...

authorized-pentest

authorized-pentest A runbook-style Claude Code skill for runn...

Exploit for Cross-site Scripting in Quantizor Markdown-To-Jsx

███████╗██╗ ██╗ █████╗ ██████╗ ██╗███╗ ██╗ ██████╗ █████...

Exploit for CVE-2025-55182

⚠️ Warning: Used only for authorization security testing. Pleas...

Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server

CVE-2023-21839 Using this project to attack or test target...